Your right to privacy and private life is a priority for us and we are constantly committed to improving the way we protect your personal data.

     

    PRELIMINARY INFORMATION

    The confidentiality, integrity and security of your personal data are the primary pillars when we implement appropriate technical and organisational measures to ensure that your rights are respected.

    This privacy policy (hereinafter referred to as “Privacy Policy”) implements the principle of transparency and describes the manner in which the collection, use, dissemination, storage and disposal of your personal data by the company titled SIGMA SERVICES INTERNATIONAL S.R.L., with registered office in Pitești, Strada Negru Vodă, Nr. 30, Bloc Argi, Sc. B, Et. 3, Ap. 11, județul  Argeș, Romania,  VAT reg. no. ( CUI): 24447880 (hereinafter referred to as “Sigma” or “we”), as personal data controller, in connection with (i) access to and use of the website available at the URL  https://sigmaautomotive.eu/     (hereinafter referred to as the “Site”), as well as in connection with (ii) the provision of our services through and outside the Site (hereinafter referred to as the “Services”).

    The data controller carries out its profile activities under the “SIGMA” name – its registered trademark, in accordance with Law No. 84/1998 on trademarks and geographical indications.

    I. DESCRIPTION OF THE PERSONAL DATA WE PROCESS, PURPOSES AND LEGAL GROUNDS FOR PROCESSING 
    1. Personal data used on the website

    The operation of the site is ensured by means of computer systems and software modules that generally obtain some personal data; the transmission of this data is carried out by default so that the online communication protocols return optimal results in terms of site use.

    This information is not collected to be linked to identified individuals, but due to its nature it may allow, through processing and integration with certain data stored by third parties, the identification of users. This information includes IP addresses, the time of the request, the method used to send the request to the server, the size of the file obtained in response, and other parameters relating to the user’s operating system.

    To the extent that such information leads to the identification of a user, the provisions of this Privacy Policy become applicable.

    1.1 Purpose of processing

    We use this data only to obtain anonymous statistical information on the use of the site and to check its correct functioning.

    On the other hand, we process personal data to establish a direct and correct communication with those interested in the services we offer – a wide variety of services in quality control in Romania (Inspections and visual quality control, measurement of parts with various devices and instruments, inspection and analysis of parts under microscope or inspection magnifying glass, retouching of parts, consultancy in the field of audits, consultancy for the realization and implementation of control devices, logistics and transport etc).

     

    1.2. Processing basis

    For the construction and functionality of the site, the legal basis for processing your data is given by the fulfilment of legal duties relating to the security aspects of our systems, according to Article 6 para. (1), lit. c) of the EU Regulation 679/2016 and art. (3) of Law 506/2004;

    For the operation of the website, the lawful basis for processing your personal data is the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to the conclusion of a contract, pursuant to Article 6 para. (1)(b) of EU Regulation 679/2016;

    In order to provide you with the latest news on the products and services provided through our website, to request additional information through the contact form and to send your suggestions, the legal basis for processing your personal data is fulfilled by obtaining, in advance, your explicit, informed and freely expressed consent, on the basis of Article 6, para. (1)(a) and in compliance with the consent requirements contained in Art. 7 and 8 of the EU Regulation 679/2016.

     

    1. Contacting us by you and offering assistance

    You can contact us in different ways: by e-mail, telephone, fax or contact form. In this case, we may process the following personal data: name, surname, e-mail, telephone and any other information you provide voluntarily when contacting us. We recommend that you only provide us with information that we need in order to help you with your request.

    We use this information to respond to your request, including providing information about our services.

     

    1. Contacting customers by our specialists

    In the course of providing our services we will use your e-mail address, telephone number, first name, last name and/or the company you represent to notify you of matters relating to the performance of the contract between us and you, for example, matters relating to the use of the site, notification of any changes to offers, any technical problems, etc.

     

    1. Commercial communications

    Also, using the links on the site you can reach certain social media platforms:

    where you can find news about services offered, events, etc., while respecting the confidentiality of the data of those present.

    1. 5. Careers

    SIGMA SERVICES INTERNATIONAL S.R.L is recruiting, through its website, personnel specialised in its field of activity. In order to be able to select the most suitable staff for our company we will need some information about you. 

    Thus, we will collect personal data contained in the CVs that you provide to the company, surname, given name(s) email address via the form in the careers section of the website (https://sigmaautomotive.eu/cariere/ ). 

    We use the above data in our legitimate interest to assess candidate suitability, confirm information in CVs, biographies and cover letters, obtain letters of recommendation and to conduct background performance checks. 

    If one of the candidates meets our requirements, we will use the personal data collected for the purpose of employment as a legal obligation.

     We will use your personal data to communicate with you during the recruitment process: name, address, e-mail address, phone number and other contact information.

    The personal data processed by Sigma is provided directly by you and other information is obtained indirectly from third parties such as job portals, professional forums and public sources (e.g. LinkedIn, Olx, Ejobs, Best Jobs, Publi 24, Indeed, Jobzz, La Jumate.ro, Facebook, Trade Register Office, court portal, etc.).

     

    II. PROVISION OF PERSONAL DATA

    We are careful to maintain respect for the principle of data minimization, but you should be aware that you may refuse to provide certain personal data (indicated above) but, in such a case, you may not be able to benefit from certain services specific to the contractual relationship described in this Privacy Policy.

     

    III. AUTOMATIC PROCESSING OF PERSONAL DATA

    Your personal data will not be processed for the purpose of generating decisions based solely on automated processing that would produce legal effects on you or would affect you to a significant extent.

     

    IV. PROCESSING TIME

    As a rule, we will process your Personal Data for the duration of the website’s existence, unless you request us to delete it.

    We aim to review and update our database periodically (as a rule, every 12 months but no more than 36 months) so that we do not store data that is no longer needed for the purposes for which it was collected.

    In certain circumstances, we may retain personal data for longer periods of time, for example where we are required to do so by legal, regulatory, tax or accounting requirements.

    At the same time, we may retain personal data for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or if we reasonably believe that there is a prospect of litigation relating to the processing of your personal data.

     

    V. TRANSFER OF PERSONAL DATA

    We may transfer personal data, to the extent necessary, but only pursuant to a confidentiality undertaking from them, guaranteeing that such data is kept secure and that the provision of such personal information is in accordance with applicable law, to the following categories of recipients:

    • contractual partners;
    • subcontractors;
    • payment processors;
    • companies offering IT services (server hosting services);
    • marketing companies;
    • public authorities, courts or arbitration tribunals, and authorities competent to investigate criminal offences.

    These recipients may be located in the European Union and/or the European Economic Area. If the recipients are located outside the European Union and the European Economic Area, including in countries that are not recognised as providing an adequate level of protection, the transfer of personal data shall only take place if adequate safeguards are in place in accordance with applicable law. In this respect, we rely on several safeguards, such as standard contractual clauses issued by the European Commission. You can receive a list of recipients in third countries from us, as well as a copy of the agreed provisions ensuring an adequate level of protection of personal data. For any request in this respect, please contact us at the contact details below.

     

    VI. SECURITY OF PERSONAL DATA

    The security of your personal data is important to us. Therefore, your personal data will be processed by applying reasonable technical and organisational measures to protect personal data, such as limiting access to personal data, encryption or anonymisation of personal data, storage on secure media. However, despite our best efforts, we cannot always guarantee the effectiveness of the security measures implemented, and therefore we cannot guarantee the security of personal data at all times.

     

    VII. YOUR RIGHTS WITH REGARD TO THE PROCESSING OF PERSONAL DATA



    1. 1. YOUR RIGHTS

    In accordance with applicable law, you have the following rights:

    Right of access: you have the right to obtain confirmation from us that your personal data is processed by us, as well as information on the specifics of the processing such as: purpose, categories of personal data processed, recipients of personal data, period for which personal data is kept, whether we transfer it abroad and how we protect it, your rights, right to lodge a complaint with the supervisory authority, where we obtained the personal data.

    Right to rectification: You have the right to request rectification of your personal data, provided that the applicable legal requirements are met. In the event of errors, we will correct your personal data immediately upon notification.

    Right to erasure: In certain cases, you have the possibility to request the erasure of personal data: (i) it is no longer necessary for the purposes for which we collected and process it; (ii) you have withdrawn your consent to the processing of personal data and we can no longer process personal data on other legal grounds; (iii) personal data is processed unlawfully; (iv) you exercise a legal right to object. We will not be able to comply with your request for erasure if the processing of personal data is necessary for compliance with a legal obligation, or for the establishment, exercise or defence of legal claims. There are also other circumstances in which we are not under the obligation to comply with this request for erasure of personal data.

    Restriction of processing: you may request that we restrict the processing of your personal data in the following situations: (i)if you dispute the accuracy of the Personal Data, for a period that allows us to verify the accuracy of the Personal Data in question; (ii) if the processing is unlawful, and you object to the erasure of the Personal Data, requesting instead that we restrict its use; (iii) if we no longer need the personal data for the purpose of processing, but you request it from us for a legal claim; (iv) if you have objected to the processing, for the period of time during which it is verified whether our legitimate rights as controller override those of the data subject. We may continue to use personal data following a request for restriction if: (i) we have your consent; (ii) in order to establish, exercise or defend a legal claim; or (iii) to protect the rights of another natural or legal person.

    Right to data portability: Insofar as personal data are processed on the basis of your consent or for the performance of the contract and the processing is carried out by automated means, you have the right to have your personal data provided to you in a structured, commonly used and machine-readable format and you have the right to transmit this personal data to another controller. This right does not adversely affect the rights and freedoms of others.

    Right to object: In certain situations, such as when we process your personal data on the basis of a legitimate interest, you have the right to object to the processing of your personal data by us. In case of unjustified objection, SIGMA SERVICES INTERNATIONAL S.R.L. is entitled to further process your personal data.

    Right to object to receiving commercial messages: You can also object to the processing of your personal data for the purpose of sending commercial messages.

    Withdrawal of consent: insofar as we process your personal data on the basis of your consent, you may withdraw your consent at any time without affecting the lawfulness of the processing based on your consent prior to the withdrawal of your consent.

    Right to opt-out of individual decisions: In certain circumstances you have the right to opt-out of a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you to a significant extent. This right does not apply where the decision: (i) is necessary for the conclusion or performance of a contract between you and us; (ii) is authorised by law which also provides adequate safeguards for your rights and freedoms;(iii) is based on your explicit consent.

    Right to complain to the supervisory authority: You have the right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing (“ANSPDCP”) about any violation of your rights regarding the processing of your personal data. The contact details of the ANSPDCP are: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336 Bucharest, Romania; e-mail: anspdcp@dataprotection.ro. 

     

    1. EXERCISING YOUR RIGHTS

    The Data Protection Officer (DPO) has the role of facilitating communication between you, us and the National Supervisory Authority (NSA), being an extension of the NSA in the data controller’s personal data processing activity to comply with GDPR requirements. Feel free to call on his/her expertise in defending your right to privacy and confidentiality in relation to the processing of your personal data at dpo@sigmaautomotive.eu.

    2.1 Identity check: We take the utmost care to ensure the confidentiality of all personal data and reserve the right to verify your identity if you make a request regarding personal data.

    2.2. Fees: As a rule, you can exercise your rights free of charge. However, we reserve the right to charge a reasonable fee if your requests are manifestly unfounded or excessive, in particular due to their repetitive nature.

    2.3. Reply time: We make every effort to respond to your request within one month of receiving it. This period may be extended by two months where necessary, taking into account the complexity and number of requests, in which case we will inform you of any such extension and the reasons for the delay.

     

    1. 3. CONTACT

    If you have any questions or concerns about this Privacy Policy or its implementation, you can contact us by email at dpo@sigmaautomotive.eu .

    VIII. UPDATES TO THIS PRIVACY POLICY

    We regularly review and, if necessary, update this privacy policy when changes occur as a result of providing services. If we want to use your personal data in a way that we have not previously identified, we will contact you to provide you with information about this and, if necessary, to ask for your consent.

    We will update the version number and date of this document each time it is changed.

    This policy becomes operational as of 01/05/2024.